Vulnerability in Apple Mac Os X
CVE-2013-0885
Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, does not properly restrict API privileges during interaction with the Chrome Web Store, which has unspecified impact and attack vectors.
EPSS: 0.009 (56.4th percentile) — read the EPSS interpretation.
Affected products
- Apple Mac_os_x
- Google Chrome
- Linux Linux_kernel
- Microsoft Windows
- Opensuse — versions 12.1, 12.2
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- chrome-cve-admin@google.com (x_refsource_CONFIRM)
- chrome-cve-admin@google.com (signature, x_refsource_OVAL, vdb-entry)
- chrome-cve-admin@google.com (x_refsource_CONFIRM)
- chrome-cve-admin@google.com (vendor-advisory, x_refsource_SUSE)
Frequently asked questions
- What is CVE-2013-0885?
- CVE-2013-0885 is a vulnerability in Apple Mac Os X, classified under Incorrect Permission Assignment for Critical Resource. Published 2013-02-23.
- Is CVE-2013-0885 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.